The Conti Ransomware Gang

An image is worth a thousand words. Video and related images courtesy of the Conti Ransomware Gang is worth more. Go through my original research here and my Conti Ransomware Gang compilation here.

Sample photos:

Sample videos:

Stay tuned!

Where Is Anton Nikolaevich Korotchenko (Антон Николаевич Коротченко) Also Known as Koobface Botnet Master KrotReal? - Part Two

Jessus. Just came across this and I decided to elaborate. It's 2012 and no one is fighting Koobface. It's just me doing research with success at the time.

If an image is worth a thousand words then check out some of the most recent publicly accessible photos of Anton Nikolaevich Korotchenko also known as Koobface botnet master KrotReal including some sample maps of his latest visits across the globe including possibly the fact that he's visited the United States which is quite a news taking into consideration his online activities counting the total number of cities that he has visited internationally up to 65.

Sample photos include:

Stay tuned!

Exposing North Korea's IT Worker's Eden Programming Solutions WMD-Funding IT Services and Solutions Franchise - An Overview

Jessus. This just in and I think I "did it" and I might even apply fore the Rewards for Justice program second time in a row this time believe it or on North Korea's WMD program in terms of tracking down North Korean IT workers that appear to have launched massive domain farms and are actively recruiting in the field of developers and IT workers to build mobile applications and web sites where the amount at least according to the U.S Government goes to fund their WMD program.

In this analysis which I did in less than two hours time I'll expose the entire domain portfolio of North Korea's IT workers that are busy franchising across the glove potentially funding North Korea's WMD program at least according to the U.S Government and will offer in-depth peek inside their Internet-connected infrastructure.

hxxp://edenprogram.com

eden201621@gmail.com

eden.company123@gmail.com

Team

Alex Banks

Anastasiia Belenok

Isaac Hunter

James Baker

Mark Rober

Mason Church

Tony Stewart

hxxp://github.com/Eden-programming

hxxp://github.com/tonyS2013

hxxp://github.com/mchurch21

hxxp://github.com/mark-rober21

hxxp://github.com/jbaker-git

hxxp://github.com/ishunter216

hxxp://github.com/Eden2016

hxxp://github.com/chris-bgit

hxxp://github.com/anastas-bel

hxxp://github.com/alexbgit80k

hxxp://dribbble.com/eden_software

hxxp://www.guru.com/freelancers/eden-programming-solutions

Team

Michael King

Nick Abbate

Tony Stewart

Claude Roberson

Tony Freeman

Dmitriy Anisimov

Samuel Agrebi

Ricardo Salazar

David Nash

Pedro Ortega

Stanislav Cherneha

hxxp://www.linkedin.com/in/michael-moore-682a51189

Sample photos include:

Related domains known to have been involved in the campaign include:

hxxp://kncw.or.kr/

hxxp://urbis.com.py/

hxxp://www.cijef.com/

hxxp://www.mcc-consulting.net/

hxxp://www.nanosoft.ae/

hxxp://www.nimble-apps.com/

hxxp://www.scarletsoftware.com/

hxxp://www.seglico.com/

hxxp://www.strate.ae/

hxxp://www.techsoftco.xyz/

hxxp://www.tekrazor.com/

hxxp://www.urbis.com.py/

hxxp://www.virtualwarein.com/

hxxp://advanzetech.com/

hxxp://akubohr.com/

hxxp://amsoftwarefactory.com/

hxxp://apncoders.com/

hxxp://avadhmicrosystem.in/

hxxp://bafv.suavilaser.es/

hxxp://blis4.co.nz/

hxxp://chamados.com.br/

hxxp://edenprogram.com/

hxxp://finnovion.com/

hxxp://ft3.group/

hxxp://fts77.ru/

hxxp://hasanitsolution.netlify.app/

hxxp://informatic.cl/

hxxp://letsoft.org/

hxxp://manin-hood.com/

hxxp://maps.google.com/

hxxp://mobicom.io/

hxxp://nanosoft.ae/

hxxp://opticosenriquehurtado.es/

hxxp://palmas.app/

hxxp://pbd.co.il/

hxxp://ponybelle.com/

hxxp://pro-codes.com/

hxxp://purpleqube.com/

hxxp://rlspencerroofing.com/

hxxp://springshare.com/

hxxp://support.google.com/

hxxp://template.wbs-dvp.pro/

hxxp://tiiastechsolutions.com/

hxxp://to-be-technology.fr/

hxxp://translate.google.com/

hxxp://trivamwebsolutions.com/

hxxp://tsv.mots.go.th/

hxxp://vyzkumne-infrastruktury-test.vm.cesnet.cz/

hxxp://www.4dbuilds.co.uk/

hxxp://www.advanzetech.com/

hxxp://www.asset.org.uk/

hxxp://www.calco.dk/

hxxp://www.chamados.com.br/

hxxp://www.crm-masters.pl/

hxxp://www.cybernaptics.mu/

hxxp://www.daslos-studios.com/

hxxp://www.easypages.url.tw/

hxxp://www.emaildoctor.org/

hxxp://www.indiamart.com/

hxxp://www.informatic.cl/

hxxp://www.leoconcept.de/

hxxp://www.netsupportsoftware.cl/

hxxp://www.olbericsolutions.com/

hxxp://www.purpleqube.com/

hxxp://www.rfcvela.com/

hxxp://www.royalbrokerage.net/

hxxp://www.sims.com.br/

hxxp://www.toshalinfotech.com/

hxxp://www.valueworkx.com/

hxxp://www.waynesolutionsinc.com/

hxxp://www.zwimbaengineering.com/

Related personally identifiable email address accounts known to have been involved in the campaign include:

afahmy[.]pro-codes.com

henrique.lambert[.]hotmail.com

saint5121[.]yahoo.com

fastbone[.]fastmail.net

itdoonsolutions[.]gmail.com

meetchristopher[.]gmail.com

t.oriol[.]salesclic.com

asauma[.]tekrazor.com

dev[.]nimble-apps.com

drshmk[.]msn.com

shuki4tal[.]gmail.com

t.oriol[.]nimble-apps.com

yoenis.pantoja[.]gmail.com

a.fahmy[.]windowslive.com

kncw[.]chol.com

asauma99[.]yahoo.com

ubiktime[.]gmail.com

t_oriol[.]yahoo.fr

trivamwebsolutions[.]gmail.com

afahmy[.]ymail.com

rodrigo.madrid.a[.]gmail.com

leogar07[.]gmail.com

caseraghi[.]gmail.com

Dinesh[.]INDIAMART.COM

amine.benabou[.]gmail.com

purplequbess[.]gmail.com

skiran.pulidindi[.]gmail.com

info[.]chinacapital.com

cassio[.]evolua.com.br

Related personally identifiable email address accounts known to have been involved in the campaign include:

careers[.]advanzetech.com

Global-HR[.]advanzetech.com

contact[.]advanzetech.com

info[.]akubohr.com

info[.]amsoftwarefactory.com

pathsoft-support[.]gmail.com

kottenator[.]gmail.com

avadhsoft[.]gmail.com

avadhmicrosystem[.]gmail.com

support[.]blis4.co.nz

suporte[.]chamados.com.br

hello[.]finnovion.com

support[.]finnovion.com

info[.]fts77.ru

ventas[.]informatic.cl

info[.]manin-hood.com

optica[.]opticosenriquehurtado.es

info[.]ponybelle.com

a.fahmy[.]windowslive.com

hello[.]purpleqube.com

info[.]rlspencerroofing.com

sales[.]springshare.com

info[.]springshare.com

support[.]springshare.com

asxvmprobertest[.]gmail.com

info[.]infinitetiias.com

contact[.]to-be-technology.fr

info[.]urbis.com.py

web[.]vyzkumne-infrastruktury.cz

kontakt[.]calco.dk

info[.]demolink.org

mail[.]demolink.org

cijef[.]cijef.com

office[.]crm-masters.pl

info[.]daslos-studios.com

support[.]emaildoctor.org

sales[.]emaildoctor.org

info[.]seglico.com

contacto[.]mcc-cons.com

contacto[.]mcc-consulting.net

sales[.]nanosoft.ae

info[.]nanosoftengineers.com

info[.]nanosoft.sg

info[.]midcoKuwait.com

info[.]facilitazis.com

enquiry[.]nanosoft.ae

info[.]olbericsolutions.com

info[.]federacioncanariadevela.org

Info[.]royalbrokerage.net

info[.]scarletsoftware.com

support[.]scarletsoftware.com

gabriel[.]seglico.com

contato[.]sims.com.br

corporate[.]strate.ae

job[.]strate.ae

privacy[.]strate.ae

sales[.]tekrazor.com

contactus[.]toshalinfotech.com

info[.]virtualwarein.com

contact[.]virtualwarein.com

customersuccess[.]waynesolutionsinc.com

support[.]waynesolutionsinc.com

privacy[.]demolink.org

duvida[.]chamados.com.br

comercial[.]chamados.com.br

problema[.]chamados.com.br

outros[.]chamados.com.br

dpo[.]evolua.com.br

suporte[.]evolua.com.br

info[.]maninhood.com

info[.]inetss.com

mail[.]demolimk.org

info[.]demolimk.org

privacy[.]springshare.com

jobs[.]springshare.com

Stay tuned!

Interrupting the Program to Showcase the BG Dishipts that Kidnapped Me!

An image is worth a thousand words. Law Enforcement is also. These are the dipshits that kidnapped me. Period.